ICO wiki - User contributions [en]

ICS0018 Hands-on seminars

2025-02-20T17:31:23Z

Ducand: /* The Seminars */

=== The idea ===

The hands-on seminars are a task for '''teams of three''' (initially based on Kristjan Karmo's ScamLab materials). The goal is to learn about different scams in a safe(ish) but real environment. A little side quest is to waste scammers' time so that they can't use it on actual victims.
A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, '''please team up and register below''', in your chosen time slot. '''There are limited presentation slots - first come, first served!''' (note: as people sign up, we will probably have to cram as many presentations as possible into each seminar - but the space is not infinite, we will have more or less 90 minutes for each).

Note: this time, we went from paired work to 3-person teams due to the number of people in the course (the seminar time would not have been enough for pairs).

=== The Task ===

Step 1: Create a fake identity and honeypot email account for engaging with scammers. Other platforms are also welcome, as long as you are able to protect your identity.

Step 2: Distribute the email address on shady or spammy sites, such as social media, online forums, etc. Some tips can be found here https://www.quora.com/How-can-I-get-scam-emails

Step 3: Wait for the scams to start rolling in.

Step 4: Engage! First select if you're going to use a naïve or aggressive approach.

If you don't manage to get any scammers to directly email your newly created address, go look in your regular mailbox, in the spam folder, ask friends & family, etc. NB! Before replying to any of those "crowdsourced" scam emails from your fake account, be sure to delete the address it was originally sent to.

Some tips for safety:
# Never reveal your (or anyone else's) real personal information to the scammers. Make up something realistic.
# Never open any links in emails unless you're in a protected sandbox environment.
# NEVER give out any real financial information, account information, or passwords.
# Always use Multi-Factor Authentication (MFA). Even on your fake accounts.

Here's the grand prize: if you manage to engage with at least 3 scammers for an email chain of 5 messages or more (they respond to at least 2 of your letters in the same thread), and present your findings at one of the seminars, '''you pass the course'''. It's not as easy as it might first seem.

An alternative way to pass is to educate people in your social network, friends, family, coworkers, etc about scams, how to spot them, how to avoid them, what to do if you're already a victim. If you want to use this option, please contact Kaido (over e-mail or MS Teams) and suggest how would you do it.

=== The Seminars ===

The hands-on seminars will have the following schedule:

* Thursday, March 6 at noon (12:00)
** Stiven Lille, Innar Viinamäe, Georg Lee
** Liam Ivanko Kivirist, Pavlo Kolesov, Julian Gressmann
** Vusal Sayadov, Jeyhun Mustafayev, Salim Akbarov
** Ksawery Nowina-Witkowski, Niko Chinikadze, Ionut-Cristian Sindile
** Mark-Henry Jakobsoo, Madis Randmäe, Eliina Gorobets

* Thursday, March 13 at noon (12:00)
** Valerija Kuzina, Vassili Korobov, Andrei Timoshin
** Fuad Suleymanov, Aydin Cankat, Yilmaz Tanin Bartu
** Nikita Šabunin, Artem Skurchynskyi, Maksim Balašov
** ...
** ...

* Thursday, March 20 at noon (12:00)
** Kaspar Sibul, Matīss Ceriņš, Liyanage Don Sithil Insara Liyanage
** Marat Biryukov, Maria Aleksandra Ploduhhina, Kirill Ševtsov
** David Ayson, Angelica Daisi Stewart, Tekla Berozashvili
** Rassell Muru, Ivan Kuznetsov, Andrei Šutkov
** Tanel Maasik, Gabriel Jääger, Eric Richard Kogerman

* Thursday, March 27 at noon (12:00)
** Deniss Pavlov, Diana Anastassija Turks, Pavel Shemetov
** Dulan Damien Candauda Arachchiege, Balazs Lambert
** Gregor Lass, Constantin Dierscheke, Gergely Benkő
** Oleh Rohachov, Andrii Korol, Manana Bebia
** ...

[[Social Engineering | Back to the course page]]

ICS0018 Hands-on seminars

2025-02-12T10:24:46Z

Ducand: /* The Seminars */

=== The idea ===

The hands-on seminars are a task for '''teams of three''' (initially based on Kristjan Karmo's ScamLab materials). The goal is to learn about different scams in a safe(ish) but real environment. A little side quest is to waste scammers' time so that they can't use it on actual victims.
A successful presentation will result in passing the course if the attendance criteria (5 out of 8 lectures and seminars) is met. To register a presentation, '''please team up and register below''', in your chosen time slot. '''There are limited presentation slots - first come, first served!''' (note: as people sign up, we will probably have to cram as many presentations as possible into each seminar - but the space is not infinite, we will have more or less 90 minutes for each).

Note: this time, we went from paired work to 3-person teams due to the number of people in the course (the seminar time would not have been enough for pairs).

=== The Task ===

Step 1: Create a fake identity and honeypot email account for engaging with scammers. Other platforms are also welcome, as long as you are able to protect your identity.

Step 2: Distribute the email address on shady or spammy sites, such as social media, online forums, etc. Some tips can be found here https://www.quora.com/How-can-I-get-scam-emails

Step 3: Wait for the scams to start rolling in.

Step 4: Engage! First select if you're going to use a naïve or aggressive approach.

If you don't manage to get any scammers to directly email your newly created address, go look in your regular mailbox, in the spam folder, ask friends & family, etc. NB! Before replying to any of those "crowdsourced" scam emails from your fake account, be sure to delete the address it was originally sent to.

Some tips for safety:
# Never reveal your (or anyone else's) real personal information to the scammers. Make up something realistic.
# Never open any links in emails unless you're in a protected sandbox environment.
# NEVER give out any real financial information, account information, or passwords.
# Always use Multi-Factor Authentication (MFA). Even on your fake accounts.

Here's the grand prize: if you manage to engage with at least 3 scammers for an email chain of 5 messages or more (they respond to at least 2 of your letters in the same thread), and present your findings at one of the seminars, '''you pass the course'''. It's not as easy as it might first seem.

An alternative way to pass is to educate people in your social network, friends, family, coworkers, etc about scams, how to spot them, how to avoid them, what to do if you're already a victim. If you want to use this option, please contact Kaido (over e-mail or MS Teams) and suggest how would you do it.

=== The Seminars ===

The hands-on seminars will have the following schedule:
* Thursday, March 6 at noon (12:00)
** Stiven Lille, Innar Viinamäe, Georg Lee
** Liam Ivanko Kivirist, Pavlo Kolesov, Julian Gressmann
** Vusal Sayadov, Jeyhun Mustafayev, Salim Akbarov
** Ksawery Nowina-Witkowski, Niko Chinikadze, Ionut-Cristian Sindile
** Mark-Henry Jakobsoo, Madis Randmäe, Eliina Gorobets
* Thursday, March 13 at noon (12:00)
** Valerija Kuzina, Vassili Korobov, Andrei Timoshin
** Miriam Popič
** Nikita Šabunin, Artem Skurchynskyi, Maksim Balašov
** ...
** ...
* Thursday, March 20 at noon (12:00)
** Kaspar Sibul, Matīss Ceriņš, Liyanage Don Sithil Insara Liyanage
** Marat Biryukov, Maria Aleksandra Ploduhhina, Kirill Ševtsov
** David Ayson, Angelica Daisi Stewart, Tekla Berozashvili
** Rassell Muru, Ivan Kuznetsov, Andrei Šutkov
** Tanel Maasik, Gabriel Jääger, Eric Richard Kogerman
* Thursday, March 27 at noon (12:00)
** Deniss Pavlov, Diana Anastassija Turks, Pavel Shemetov
** Dulan Damien Candauda Arachchiege,
** ...
** ...
** ...

[[Social Engineering | Back to the course page]]

Exam schedule (27.12.2023)

2023-12-27T07:04:01Z

Ducand:

Written exam:

* (add your names here)
* Kirill Ševtsov
* Mark-Henry Jakobsoo
* Fjodor Bondar
* Maria Aleksandra Ploduhhina
* Stiven Lille
* Dulan Damien Candauda Arachchiege
* Karol Keelmann

Oral exam:

* Manana Bebia
* Andrii Korol
* Innar Viinamäe
* Madis Randmäe
* Vassili Korobov
* Leo Goršić
* Gabriel Jääger
* Rassell Muru
* Mattias Nõmm
* Pavel Shemetov
* Eric Richard Kogerman
* Marat Biryukov
* Adrian Wiendl
* Andrei Timošin
* Diana Anastassija Turks
* Oleh Rohachov
* Sergei Pliznik
* Ringo-Lehari Purge
* Oleg Arusoo

Schedule ('''will be filled by Kristjan'''):

9:00-9:30 (oral)
* your_name_here
* your_name_here
* your_name_here
9:30-10:00 (oral)
* your_name_here
* your_name_here
* your_name_here
10:00-10:30 (oral/written)
* your_name_here
* your_name_here
* your_name_here
10:30-11:00 (written)
* your_name_here
* your_name_here
* your_name_here
* your_name_here
* your_name_here
* your_name_here
11:00-11:30 (oral)
* your_name_here
* your_name_here
* your_name_here
11:30-12:00 (oral)
* your_name_here
* your_name_here
* your_name_here

Exam schedule (27.12.2023)

2023-12-27T04:23:08Z

Ducand:

Written exam:

(add your names here)

Kirill Ševtsov

Mark-Henry Jakobsoo

Fjodor Bondar

Maria Aleksandra Ploduhhina

Stiven Lille

Dulan Damien

Oral exam:

(add your names here)

Vassili Korobov

Leo Goršić

Gabriel Jääger

Rassell Muru

Mattias Nõmm

Pavel Shemetov

Eric Richard Kogerman

Marat Biryukov

Adrian Wiendl

Andrei Timošin

Diana Anastassija Turks

Oleh Rohachov

Sergei Pliznik

Schedule ('''will be filled by Kristjan'''):

9:00-9:30 (oral)
* your_name_here
* your_name_here
* your_name_here
9:30-10:00 (oral)
* your_name_here
* your_name_here
* your_name_here
10:00-10:30 (oral/written)
* your_name_here
* your_name_here
* your_name_here
10:30-11:00 (written)
* Fjodor Bondar
* your_name_here
* your_name_here
* your_name_here
* your_name_here
* your_name_here
11:00-11:30 (oral)
* your_name_here
* your_name_here
* your_name_here
11:30-12:00 (oral)
* your_name_here
* your_name_here
* your_name_here

Exam schedule (27.12.2023)

2023-12-26T21:31:31Z

Ducand:

Written exam:

(add your names here)

Mark-Henry Jakobsoo

Fjodor Bondar

Maria Aleksandra Ploduhhina

Oral exam:

(add your names here)

Leo Goršić

Rassell Muru

Mattias Nõmm

Pavel Shemetov

Eric Richard Kogerman

Marat Biryukov

Adrian Wiendl

Andrei Timošin

Dulan Damien

Schedule ('''will be filled by Kristjan'''):

9:00-9:30 (oral)
* your_name_here
* your_name_here
* your_name_here
9:30-10:00 (oral)
* your_name_here
* your_name_here
* your_name_here
10:00-10:30 (oral/written)
* your_name_here
* your_name_here
* your_name_here
10:30-11:00 (written)
* Fjodor Bondar
* your_name_here
* your_name_here
* your_name_here
* your_name_here
* your_name_here
11:00-11:30 (oral)
* your_name_here
* your_name_here
* your_name_here
11:30-12:00 (oral)
* your_name_here
* your_name_here
* your_name_here

Group 1 seminar schedule

2023-10-15T13:58:08Z

Ducand:

# Nov 2:
#* your_name_here
#* your_name_here
#* your_name_here
#* your_name_here
#* your_name_here
# Nov 9:
#* Mark-Henry Jakobsoo - Two-Faced Capability Of OSINT (ethical and unethical use cases)
#* Balázs Lambert - Ethical Implications of 5G
#* Dulan Damien - The history and ethical aspects of search engines
#* your_name_here
#* your_name_here
# Nov 16:
#* Ionut-Cristian Sindile - Exploiting GSM Network Flaws
#* Valerija Kuzina
#* Pavlo Kolesov
#* Liam Ivanko Kivirist - Exploring the Manipulation and Dangers of Open Standards and Open Source
#* Matīss Ceriņš -
# Nov 23:
#* Manana Bebia - Social Media impacts and risks in everyday life
#* your_name_here
#* Marat Biryukov - Ethical Dilemmas in Digital Piracy
#* Liyanage Don Sithil Insara Liyanage - Ethical Implications of Device ID Tracking in Digital Advertising
#* Deniss Pavlov - Artificial Intelligence in the world of fraudsters
# Nov 30:
#* Salim Akbarov
#* Adrian Wiendl - Ownership and responsibility of AI generated media
#* Najaf Alkhazov - Open Source Software and Ethical Development
#* Jeyhun Mustafayev-Web Application Security
#* Fjodor Bondar - Phishing Websites
# Dec 7:
#* Ivan Kuznetsov - The Ethical Aspect of Artificial Intelligence: Job Displacement
#* Eric Richard Kogerman - FOSS in education
#* Georg Lee - AI in Healthcare: Benefits & Challenges
#* Rassell Muru - Privacy in Social Networks
#* Karol Keelmann - Digital Citizenship: Ethical Responsibilities in the Online World
# Dec 14:
#* Maria Aleksandra Ploduhhina - Doxing
#* Oleg Arusoo - Deepfakes and Manipulated Media
#* Artem Skurchynskyi - Blockchain technology and its application in various professional spheres
#* Nikita Shabunin
#* Maksim Balashov
# Dec 21:
#* Julian Gressmann - Data-Privacy: Awareness and its Influence on Digital Behavior and Trust
#* Sergei Pliznik
#* Vassili Korobov
#* Mattias Nõmm - The weaponization of Artificial Intelligence
#* your_name_here

[[SPEAIT|Back to the main course page]]